Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33372e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e33372e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          Z4+wXuob1GJYwqGIYA/j+SizNbjjHTnM+WkWnXAn5xU=
Subject key identifier:   13:52:E2:CC:53:07:1A:3B:0F:8D:B6:27:22:9C:AC:F0:AE:8B:4F:C3
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       4D482563FB74DA5CE1A22EBE66444278BAA29337
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33372e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:00 +0000
ROA not before:           Wed 22 Mar 2023 21:55:00 +0000
ROA not after:            Wed 20 Mar 2024 22:00:00 +0000
asID:                     262760
IP address blocks:        179.106.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:48:25:63:fb:74:da:5c:e1:a2:2e:be:66:44:42:78:ba:a2:93:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:00 2023 GMT
            Not After : Mar 20 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:f2:08:1e:64:01:e9:65:71:da:4b:9f:d6:
                    ea:e1:8d:72:14:30:a2:0a:5f:23:34:8c:f0:20:46:
                    0d:d7:4a:25:ba:df:ec:b8:4f:cf:10:4c:bb:ea:73:
                    b2:bb:b0:03:a8:57:f8:b8:33:e0:5f:a7:0d:9f:26:
                    c8:2d:41:c8:01:0c:b8:4f:d7:94:3e:3d:7e:d8:0f:
                    be:62:b2:1d:c4:3e:f5:b1:57:cf:fe:28:09:27:1d:
                    29:f7:ad:d6:d0:0c:5a:a4:8e:69:9d:98:0d:18:01:
                    c7:6d:e0:e1:83:81:40:a5:ca:dc:a2:c2:4f:53:20:
                    f4:69:3d:41:8d:c3:f6:e7:60:78:20:14:b9:bd:6f:
                    88:bc:78:c9:a6:95:98:75:c7:e2:df:9e:a7:aa:7e:
                    9c:f1:d2:32:5a:3e:71:e3:10:6f:f5:8e:60:4b:72:
                    6b:d2:03:bd:a0:75:99:fd:17:4a:67:de:37:36:58:
                    dc:51:09:c6:50:a6:8b:21:ef:b0:43:b3:70:29:1d:
                    b4:9d:33:c1:ec:d1:30:8c:6c:93:d8:88:fc:f7:f6:
                    f4:d3:0e:37:3d:71:c8:7f:b8:27:9b:69:9e:12:01:
                    d3:c0:d2:99:c3:24:e0:a6:61:6c:41:c1:62:32:0a:
                    ae:0a:5f:8c:76:65:c0:55:8d:92:2c:8d:2c:82:89:
                    d6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:52:E2:CC:53:07:1A:3B:0F:8D:B6:27:22:9C:AC:F0:AE:8B:4F:C3
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33372e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:20:2d:39:f2:72:a1:5d:3d:a2:71:28:49:61:51:be:19:35:
         e7:28:8d:fc:ae:f0:bf:a9:4f:d1:2e:b9:46:7d:bc:f0:2e:9b:
         64:db:8f:72:20:21:43:2e:b1:bc:f2:f5:12:34:8b:e5:73:10:
         fc:3b:a7:0b:68:5b:92:d6:b0:f9:33:90:19:df:1d:88:83:dd:
         86:a0:1b:d9:4a:c5:8d:13:64:03:8a:ec:9b:8b:57:41:a3:ad:
         55:ab:ff:d3:9c:fb:c8:00:50:9d:83:8c:35:96:14:0b:bf:5a:
         1c:bb:a5:54:37:e9:bb:b7:2b:29:19:2e:72:03:62:ba:e1:9a:
         9f:45:31:40:94:4c:69:09:d7:b0:4d:94:b3:7d:c0:db:16:5a:
         98:d8:5f:9e:e6:f7:e6:df:b9:ed:04:22:da:82:0b:b8:44:1f:
         3e:fd:46:82:6f:d4:b5:eb:5d:41:f5:09:6c:85:71:e4:c6:00:
         c1:4a:4c:a2:04:f3:38:73:09:0b:dd:62:68:4e:ab:32:a1:de:
         7a:b8:4a:56:03:c6:d9:c6:26:7f:bf:10:43:7f:ce:b7:e3:56:
         c8:54:9b:52:6d:ed:e8:92:fb:9a:1e:14:e2:20:16:d0:0e:6a:
         09:e0:da:76:ed:35:72:8e:d4:c4:0d:ec:e9:15:1c:81:aa:99:
         1b:36:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org